GemRoll Privacy Policy
1. Data We Collect
None. The App does not collect, store, transmit, or share any personal data. There is no account, no sign-up, no analytics SDK, no advertising SDK, and no tracking of any kind.
Concretely, we never:
- ask you to register — no phone number, email, or identity information is required;
- integrate third-party analytics, crash-reporting, or advertising SDKs;
- collect device identifiers (IDFA, IDFV, etc.) or track you across apps;
- upload, sell, or share your photos, face embeddings, or usage behaviour;
- access anything outside your photo library — Contacts, Location, Calendar, and the like are never requested.
2. Photo Library Access
The App requests access to your photo library solely to analyze your photos on your device. All processing — face recognition, similarity detection, text recognition (OCR), aesthetic scoring — runs entirely on your iPhone's Neural Engine. No photo, thumbnail, face print, or derived data is ever uploaded to any server.
Permissions the App requests, and why:
| Permission | Purpose | Required? |
|---|---|---|
| Photos (read) | On-device scanning, grouping, and similar-photo detection | Required for core features |
| Photos (add / delete) | Saving converted files; deletions go to iOS "Recently Deleted" only | Required for cleanup and conversion |
| Notifications | The monthly cleanup reminder on the 1st — generated and delivered locally, no server or account involved | Optional, can be turned off anytime |
Every permission can be revoked at any time in iOS Settings → Privacy & Security, or Settings → GemRoll. Revoking a permission disables the corresponding feature only; nothing else breaks.
3. Face Recognition Data
Face detection and identification are performed 100% on-device using Apple's Vision framework and an embedded neural network model. Face embeddings are stored only in a local database inside the App's sandbox on your device. They are never transmitted, shared, or used for any purpose other than grouping photos within the App. Deleting the App permanently deletes this database — we cannot access it and cannot recover it for you.
4. Local Storage
The App stores only analysis caches (feature vectors, scan results) and your preferences on your device. Photo deletions are performed exclusively through iOS's "Recently Deleted" album, giving you a 30-day system-level recovery window. Files created by conversions (Live Photo flattening, video compression) stay in your system photo library and the "GemRoll" album — they never leave the device either.
5. In-App Purchases
GemRoll offers one optional one-time purchase ("GemRoll Pro"). There is no subscription of any kind: nothing auto-renews, and no recurring charge can ever appear on your account. We promise never to introduce a subscription.
Purchases are processed entirely by Apple via StoreKit. We never see, collect, or store your payment information, Apple ID, or any purchase-related personal data.
6. Third-Party Services
The App integrates no third-party services that receive your data. There are no network requests except:
- Apple's StoreKit, for purchases and restoring purchases; and
- iCloud photo downloads performed by iOS itself when you explicitly enable "iCloud Photos" in Settings (this traffic is between your device and Apple only, and is unrelated to the App).
7. Children's Privacy
The App does not collect data from anyone, including children. Face grouping of family photos (including children) happens entirely on your device — which is the strongest possible protection under COPPA, GDPR-K, and similar rules: no collection means no exposure.
8. Your Rights
Since we hold no data about you, there is nothing to request, correct, delete, or export on our side. All data lives on your device and is under your control at all times; deleting the App removes everything. If your jurisdiction grants you data-subject rights (GDPR, CCPA, and others), the App's "no collection" design satisfies them by construction.
9. Changes to This Policy
If this policy ever changes, the updated version will be posted at this URL with a new effective date. Our core promise — photos never leave your device — will never change.
10. Contact
Questions or privacy concerns: [email protected] (we reply within 48 hours).